VULNERABILITY INTELLIGENCE
CVE-2026-14337
EPSS probability0.42%
CISA KEVNot currently listed
Published2026-08-04
Last modified2026-10-23
Description
Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.
Weakness classification
- security@pega.com: CWE-79